---
type: "Bill"
title: "Information privacy: connected devices."
description: "Existing law requires a business to take all reasonable steps to dispose of customer records within its custody or control containing personal information when the records are no longer to be retained by the business by shredding, erasing, or otherwise modifying the personal information in those records to make it unreadable or undecipherable. Existing law also requires a business that owns, licenses, or maintains personal information about a California resident to implement and maintain reasonable security procedures and practices appropriate to the nature of the information, to protect the personal information from unauthorized access, destruction, use, modification, or disclosure. Existing law authorizes a customer injured by a violation of these provisions to institute a civil action to recover damages."
jurisdiction: "us/states/ca"
legislature: "California Legislature"
session: "20172018"
identifier: "AB 1906"
citation: "California AB 1906 (20172018)"
classification: ["bill"]
subjects: ["Information privacy: connected devices."]
status: "enacted"
primary_sponsors: ["Irwin"]
version_count: 9
action_count: 26
vote_count: 8
first_action: "2018-01-22"
last_action: "2018-09-28"
source: "openstates"
source_identifier: "ocd-bill/3f993eed-bebf-4977-9b4b-74e03d425c53"
source_url: "http://leginfo.legislature.ca.gov/faces/billNavClient.xhtml?bill_id=201720180AB1906"
source_hash: "70b35b07080eb498981b6040e45cbc24629e8eb7ca9349e350955c194584f7da"
vintage: "2026-07-01"
source_snapshot: "https://data.openstates.org/daily/2026-07-01/public.pgdump"
retrieved_at: "2026-07-06"
confidence: "reported"
tags: ["legislation", "bill", "us-ca"]
---

# California AB 1906 (20172018) — Information privacy: connected devices.

Existing law requires a business to take all reasonable steps to dispose of customer records within its custody or control containing personal information when the records are no longer to be retained by the business by shredding, erasing, or otherwise modifying the personal information in those records to make it unreadable or undecipherable. Existing law also requires a business that owns, licenses, or maintains personal information about a California resident to implement and maintain reasonable security procedures and practices appropriate to the nature of the information, to protect the personal information from unauthorized access, destruction, use, modification, or disclosure. Existing law authorizes a customer injured by a violation of these provisions to institute a civil action to recover damages.

## Version chain

The bill's text revisions, in order — the diff chain from filing to enrollment.

1. **01/22/18 - Introduced** (filed) — [source](https://leginfo.legislature.ca.gov/faces/billPdf.xhtml?bill_id=201720180AB1906&version=20170AB190699INT)
2. **04/23/18 - Amended Assembly** (committee substitute) — [source](https://leginfo.legislature.ca.gov/faces/billPdf.xhtml?bill_id=201720180AB1906&version=20170AB190698AMD)
3. **05/09/18 - Amended Assembly** (committee substitute) — [source](https://leginfo.legislature.ca.gov/faces/billPdf.xhtml?bill_id=201720180AB1906&version=20170AB190697AMD)
4. **06/11/18 - Amended Senate** (committee substitute) — [source](https://leginfo.legislature.ca.gov/faces/billPdf.xhtml?bill_id=201720180AB1906&version=20170AB190696AMD)
5. **07/03/18 - Amended Senate** (committee substitute) — [source](https://leginfo.legislature.ca.gov/faces/billPdf.xhtml?bill_id=201720180AB1906&version=20170AB190695AMD)
6. **08/24/18 - Amended Senate** (committee substitute) — [source](https://leginfo.legislature.ca.gov/faces/billPdf.xhtml?bill_id=201720180AB1906&version=20170AB190694AMD)
7. **09/28/18 - Chaptered** (committee substitute) — [source](https://leginfo.legislature.ca.gov/faces/billPdf.xhtml?bill_id=201720180AB1906&version=20170AB190692CHP)
8. **AB1906** (committee substitute) — [source](http://leginfo.legislature.ca.gov/faces/billNavClient.xhtml?bill_id=201720180AB1906)
9. **09/04/18 - Enrolled** (enrolled) — [source](https://leginfo.legislature.ca.gov/faces/billPdf.xhtml?bill_id=201720180AB1906&version=20170AB190693ENR)

## Votes

- Do pass as amended, but first amend, and re-refer to the Committee on [Appropriations] — **5–1** (pass) · upper
- Do pass, but first be re-referred to the Committee on [Judiciary] — **8–1** (pass) · upper
- Do pass — **5–2** (pass) · upper
- Placed on suspense file — **7–0** (pass) · upper
- 3rd Reading AB1906 Irwin et al. By Jackson — **29–8** (pass) · upper
- Do pass as amended. — **8–2** (pass) · lower
- AB 1906 IRWIN Concurrence in Senate Amendments — **60–17** (pass) · lower
- AB 1906 IRWIN Assembly Third Reading — **56–16** (pass) · lower

## Sponsors

- Irwin — primary (person)
- Jackson — principal coauthor (person)

## Timeline

The legislative action history — every referral, reading, and vote.

- **2018-01-22** Read first time. To print. `reading-1`
- **2018-01-23** From printer. May be heard in committee February 22.
- **2018-02-05** Referred to Com. on P. & C.P. `referral-committee`
- **2018-04-23** From committee chair, with author's amendments: Amend, and re-refer to Com. on P. & C.P. Read second time and amended. `amendment-introduction, amendment-passage, reading-2, reading-1`
- **2018-04-24** Re-referred to Com. on P. & C.P. `referral-committee`
- **2018-05-08** From committee: Amend, and do pass as amended. (Ayes 8. Noes 2.) (May 1). `amendment-passage, committee-passage, amendment-introduction`
- **2018-05-09** Read second time and amended. Ordered returned to second reading. `reading-1, amendment-passage, reading-2`
- **2018-05-10** Read second time. Ordered to third reading. `reading-2, reading-1`
- **2018-05-29** Read third time. Passed. Ordered to the Senate. (Ayes 56. Noes 16. Page 5371.) `reading-3, passage, reading-1`
- **2018-05-30** In Senate. Read first time. To Com. on RLS. for assignment. `reading-1`
- **2018-06-07** Referred to Coms. on B., P. & E.D. and JUD. `referral-committee`
- **2018-06-11** From committee chair, with author's amendments: Amend, and re-refer to committee. Read second time, amended, and re-referred to Com. on B., P. & E.D. `amendment-passage, referral-committee, reading-2, reading-1, amendment-introduction`
- **2018-06-19** From committee: Do pass and re-refer to Com. on JUD. (Ayes 8. Noes 1.) (June 18). Re-referred to Com. on JUD. `committee-passage-favorable, committee-passage, referral-committee`
- **2018-07-02** From committee: Amend, and do pass as amended and re-refer to Com. on APPR. (Ayes 5. Noes 1.) (June 26). `amendment-passage, committee-passage, amendment-introduction`
- **2018-07-03** Read second time and amended. Re-referred to Com. on APPR. `amendment-passage, reading-2, referral-committee, reading-1`
- **2018-08-06** In committee: Referred to APPR. suspense file. `referral-committee`
- **2018-08-17** From committee: Do pass. (Ayes 5. Noes 2.) (August 16). `committee-passage-favorable, committee-passage`
- **2018-08-17** Read second time. Ordered to third reading. `reading-2, reading-1`
- **2018-08-24** Read third time and amended. Ordered to second reading. `amendment-passage, reading-3, reading-1`
- **2018-08-27** Read second time. Ordered to third reading. `reading-2, reading-1`
- **2018-08-29** Read third time. Passed. Ordered to the Assembly. (Ayes 29. Noes 8. Page 5966.). `reading-3, passage, reading-1`
- **2018-08-29** In Assembly. Concurrence in Senate amendments pending.
- **2018-08-30** Senate amendments concurred in. To Engrossing and Enrolling. (Ayes 60. Noes 17. Page 6990.). `committee-passage-favorable, amendment-passage`
- **2018-09-10** Enrolled and presented to the Governor at 3:30 p.m.
- **2018-09-28** Approved by the Governor. `executive-signature`
- **2018-09-28** Chaptered by Secretary of State - Chapter 860, Statutes of 2018.

## Source

OpenStates / OpenCivicData bulk snapshot [2026-07-01](https://data.openstates.org/daily/2026-07-01/public.pgdump); origin `ocd-bill/3f993eed-bebf-4977-9b4b-74e03d425c53`. Confidence: reported (aggregated from official California legislature records).